You are on page 1of 3

Manual de balanceo de carga PCC para 4 Lineas de Internet de la misma Velocidad

si sigues estos 9 pasos basicos tendra tu balaneco Operando de manera correcta

PASO 1

Nombrando las interfaces

aqui se deben identificar las interfaces que van a usar

/interface ethernet
set [ find default-name=ether1 ] comment=Ether1 name=WAN1
set [ find default-name=ether2 ] comment=Ether2 name=WAN2
set [ find default-name=ether3 ] comment=Ether3 name=WAN3
set [ find default-name=ether4 ] comment=Ether4 name=WAN4
set [ find default-name=ether5 ] comment=Ether5 name=LAN

PASO 2

Creando las conexiones pppoe-client

Ojo!

en mi caso

password=\bandaancha09 tu debes averiguar el password de tu cuenta PPPoE con el


proveedor

user=tr069movistar tu debes averiguar el user de tu cuenta PPPoE con el proveedor

/interface pppoe-client
add disabled=no interface=WAN1 mrru=1600 name=pppoe-out1 password=\
bandaancha09 user=tr069movistar
add disabled=no interface=WAN2 mrru=1600 name=pppoe-out2 password=\
bandaancha09 user=tr069movistar
add disabled=no interface=WAN3 mrru=1600 name=pppoe-out3 password=\
bandaancha09 user=tr069movistar
add disabled=no interface=WAN4 mrru=1600 name=pppoe-out4 password=\
bandaancha09 user=tr069movistar

PASO 3

Configurando las direeciones IP en la interface LAN

/ip address
add address=192.168.1.1/24 interface=LAN network=192.168.1.0

PASO 4

Enmascarando las interfaces pppoe-client


/ip firewall nat
add action=masquerade chain=srcnat out-interface=pppoe-out1
add action=masquerade chain=srcnat out-interface=pppoe-out2
add action=masquerade chain=srcnat out-interface=pppoe-out3
add action=masquerade chain=srcnat out-interface=pppoe-out4

PASO 5

creando las rutas

/ip route
add gateway=pppoe-out1 check-gateway=ping distance=1
add gateway=pppoe-out2 check-gateway=ping distance=2
add gateway=pppoe-out3 check-gateway=ping distance=3
add gateway=pppoe-out4 check-gateway=ping distance=4

Paso 6

/ip firewall mangle


add chain=prerouting in-interface=pppoe-out1 connection-state=new new-connection-
mark=pppoe-out1_conn action=mark-connection passthrough=yes
add chain=prerouting in-interface=pppoe-out2 connection-state=new new-connection-
mark=pppoe-out2_conn action=mark-connection passthrough=yes
add chain=prerouting in-interface=pppoe-out3 connection-state=new new-connection-
mark=pppoe-out3_conn action=mark-connection passthrough=yes
add chain=prerouting in-interface=pppoe-out4 connection-state=new new-connection-
mark=pppoe-out4_conn action=mark-connection passthrough=yes

add chain=output connection-mark=pppoe-out1_conn new-routing-mark=to_pppoe-out1


action=mark-routing passthrough=yes
add chain=output connection-mark=pppoe-out2_conn new-routing-mark=to_pppoe-out2
action=mark-routing passthrough=yes
add chain=output connection-mark=pppoe-out3_conn new-routing-mark=to_pppoe-out3
action=mark-routing passthrough=yes
add chain=output connection-mark=pppoe-out4_conn new-routing-mark=to_pppoe-out4
action=mark-routing passthrough=yes

Paso 7

/ip firewall mangle


add chain=prerouting in-interface=LAN connection-state=new dst-address-type=!local
per-connection-classifier=both-addresses:4/0 action=mark-connection new-connection-
mark=pppoe-out1_conn passthrough=yes
add chain=prerouting in-interface=LAN connection-state=new dst-address-type=!local
per-connection-classifier=both-addresses:4/1 action=mark-connection new-connection-
mark=pppoe-out2_conn passthrough=yes
add chain=prerouting in-interface=LAN connection-state=new dst-address-type=!local
per-connection-classifier=both-addresses:4/2 action=mark-connection new-connection-
mark=pppoe-out3_conn passthrough=yes
add chain=prerouting in-interface=LAN connection-state=new dst-address-type=!local
per-connection-classifier=both-addresses:4/3 action=mark-connection new-connection-
mark=pppoe-out4_conn passthrough=yes

/ip firewall mangle


add chain=prerouting in-interface=LAN connection-mark=pppoe-out1_conn action=mark-
routing new-routing-mark=to_pppoe-out1 passthrough=yes
add chain=prerouting in-interface=LAN connection-mark=pppoe-out2_conn action=mark-
routing new-routing-mark=to_pppoe-out2 passthrough=yes
add chain=prerouting in-interface=LAN connection-mark=pppoe-out3_conn action=mark-
routing new-routing-mark=to_pppoe-out3 passthrough=yes
add chain=prerouting in-interface=LAN connection-mark=pppoe-out4_conn action=mark-
routing new-routing-mark=to_pppoe-out4 passthrough=yes

Paso 8

Configurando las rutas, recuerdan las marcas de ruta que hicimos en los pasos 6 y
7 , to_pppoe-out1, to_pppoe-out2, to_pppoe-out3, to_pppoe-out4 vamos a usarlas
ahora!

/ip route
add gateway=pppoe-out1 routing-mark=to_pppoe-out1 check-gateway=ping
add gateway=pppoe-out2 routing-mark=to_pppoe-out2 check-gateway=ping
add gateway=pppoe-out3 routing-mark=to_pppoe-out3 check-gateway=ping
add gateway=pppoe-out4 routing-mark=to_pppoe-out4 check-gateway=ping

Paso 9

Configurando los DNS Publicos

/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4

Reglas de seguridad y proteccion para ataques al puerto 53 del DNS

/ip firewall filter


add action=drop chain=input comment="Block Intrusos DNS" dst-port=53 in-
interface=pppoe-out1 protocol=udp
add action=drop chain=input comment="Block Intrusos DNS" dst-port=53 in-
interface=pppoe-out2 protocol=udp
add action=drop chain=input comment="Block Intrusos DNS" dst-port=53 in-
interface=pppoe-out3 protocol=udp
add action=drop chain=input comment="Block Intrusos DNS" dst-port=53 in-
interface=pppoe-out4 protocol=udp

You might also like